Worksheets3.2.1 Threat Modeling & IOT
Total questions: 10
Worksheet time: 5mins
Which is a common reason people do not secure their devices?
It violates all software license agreements
It permanently deletes useful phone features
It guarantees slower internet for all users
It is inconvenient to change habits and settings
A student plans to secure their laptop. They identify the data to protect, list possible attackers, estimate likelihood, and consider consequences. What is the next step to complete the threat modeling process?
Decide how much effort to tolerate to reduce risk
Delete all files to eliminate vulnerabilities
Block every website with a firewall immediately
Share passwords with friends for convenience
Which statement best defines the Internet of Things (IoT)?
Physical objects with sensors that exchange data online
Traditional computers used for enterprise databases
Websites that store information for cloud computing
Social media accounts connecting friends and followers
You are creating a simple threat model for your smart doorbell. Which first step is most appropriate?
Block every network port on the home router
Replace all devices with non‑networked alternatives
Identify assets like video, audio, and account access
Immediately buy new hardware with stronger antennas
If a hospital used vulnerable insulin pumps, what is the most serious impact an attacker could cause?
Temporary loss of Wi‑Fi connectivity
Incorrect insulin dose causing harm
Minor battery drain over several days
Unauthorized access to music playlists
Which question helps you identify the asset and purpose when modeling threats for an IoT device?
What do I want to protect and why is it useful
Who wants to attack and how skilled are they
Which brand is most popular this year
Where was the device manufactured originally
When defining adversaries for your personal IoT device, which question should you ask first?
What color is the device case
Who do I want to protect it from
Which apps look most colorful
How many friends also own it
Which consideration best estimates probability in a simple risk assessment for an IoT device?
How heavy is the device to carry
How stylish does the device appear
How likely is this threat to happen
How expensive was the device to buy
A threat model asks, “How can this product be misused?” What does this primarily evaluate?
The popularity ranking on store websites
The device’s environmental packaging score
The resale value after two years of use
Possible attack methods an adversary could try
Which action best reduces misuse risk for a home camera with cloud access?
Share account with friends for convenience
Use only default username and password
Place stickers over the brand logo
Enable two-factor authentication for account
